@agentproto/runtime 5.5.0 → 5.7.0

package/dist/config.mjs

@@ -17,9 +17,12 @@ import '@agentproto/plugin-local-browser';
 import '@modelcontextprotocol/sdk/types.js';
 import '@agentproto/provider-kit';
 import '@agentproto/llm-endpoint';
+import 'http';
+import 'net';
+import 'stream';
+import 'stream/promises';
 import '@modelcontextprotocol/sdk/client/index.js';
 import '@modelcontextprotocol/sdk/client/streamableHttp.js';
-import 'net';
 import { SandboxSpecSchema } from '@agentproto/sandbox';
 import { CatalogProviderSchema } from '@agentproto/model-catalog';
 import '@agentproto/app-client/runner-select';
@@ -2190,6 +2193,15 @@ var init_sandbox_agent_session_proxy = __esm({
     init_sandbox_ledger();
   }
 });
+var init_device_sandbox_bridge = __esm({
+  "src/device-sandbox-bridge.ts"() {
+  }
+});
+var init_device = __esm({
+  "src/sandbox-providers/device.ts"() {
+    init_device_sandbox_bridge();
+  }
+});
 var init_sandbox_app_serve = __esm({
   "src/sandbox-app-serve.ts"() {
   }
@@ -2256,6 +2268,7 @@ var init_session_spawn = __esm({
     init_inference_binding();
     init_mcp_credential_deps();
     init_sandbox_agent_session_proxy();
+    init_device();
     init_sandbox_ledger();
     init_sandbox_app_serve();
     init_sandbox_adapters();
@@ -2559,6 +2572,16 @@ var init_agent_start_schema = __esm({
         ])
       ).optional().describe(
         `Isolate this session in its OWN git worktree instead of \`cwd\`. \`true\` provisions one on a fresh \`wt/<slug>\` branch; \`{ slug, base, async }\` pins details. ROOT spawns only (rejected on a nested spawn \u2014 use \`sandbox\` there); ignored when \`cwd\` isn't a git repo. NOT auto-removed on session close \u2014 tear down with \`agentproto worktree rm\`. ${help("worktree")}`
+      ),
+      // CONTROLLER-INTERNAL (issue #1647) — NOT for tool callers. The device
+      // sandbox proxy (`bootSandboxAgentSession`, session-spawn.ts) stamps it
+      // when it forwards an explicit `workspaceSlug` across the /device-spawn
+      // bridge, so the TARGET daemon's `agent_start` treats the slug as
+      // bridge-ffi: registry-first, no active-workspace fallback — an
+      // unresolvable slug fails loudly (`device_bridge_workspace_unknown`)
+      // instead of silently landing wherever the target happens to have active.
+      deviceBridge: mcpBool.optional().describe(
+        "Internal: set by the controller's device-sandbox bridge when this spawn crossed a device pairing. Do not set \u2014 an explicit `workspaceSlug` that the target daemon has not registered fails instead of falling back to its active workspace."
       )
     };
     agentStartInputSchema = z.object(agentStartInputShape);